provides the customer and merchant with secure registration and transfer of entered card data, which is confirmed by the PCI DSS certificate that WSPay has. WSPay ™ uses SSL certificate 256 bit encryption and TLS 1.2 cryptographic protocol as the highest levels of protection when writing and transferring data.

WSPay ™, as the executor of credit card authorization and collection, handles personal data as a processor and treats personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679 and strict PCI DSS L1 rules on data protection and data transmission.

WSPay ™ uses SSL certificate 256 bit encryption and TLS 1.2 cryptographic protocol as the highest levels of protection when writing and transferring data.

Personal data used for the purpose of authorization and collection, ie in the performance of obligations under the Agreement or under the Agreement, are considered confidential data.

The following personal data of the buyer are required for the execution of the Contract (authorizations and collection):

Name and surname

E-mail

Phone

Address

City

Zip code

State

Card type

Card number

Card life

CVV card code

WSPay does not process or use this personal data except for the purpose of enforcing the authorization and collection agreement.

WSPay ™ guarantees the fulfillment of all conditions set by the applicable regulations on personal data protection for personal data processors, and in particular the taking of all necessary technical, organizational and security measures, and this is especially confirmed by the PCI DSS L1 certificate.

Waterworld Croatia has no insight into the customer’s bank details. Waterworld Croatia employees do not have access to the customer’s card number at any time. Only the number of the authorized transaction is available to them, which allows the collection of the full or partial amount of the agreed transaction or cancellation for reasons agreed with the buyer.

The protection of personal data is in line with the General Data Protection Regulation of the European Parliament and of the Council No. 2016/679-Regulation and the implementation of the General Data Protection Regulation.